Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
File: a4h-elixD-3igEteKeziwpnCf6E.mft (raw, json)
Hash identifier: 2tNkM/rBUohPgILFtX2Nkn4MA2vaX0+wAK1+gJRjih0=
Subject key identifier: 0E:5C:DD:4C:02:FC:F4:AC:F0:BB:4F:53:C0:BA:5F:D1:B3:86:93:60
Authority key identifier: 6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1
Certificate issuer: /CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
Manifest number: 0132
Signing time: Sat 29 Mar 2025 03:56:44 +0000
Manifest this update: Sat 29 Mar 2025 03:56:44 +0000
Manifest next update: Sat 05 Apr 2025 03:56:44 +0000
Files and hashes: 1: a4h-elixD-3igEteKeziwpnCf6E.crl (hash: YewUoL3AD8+c9quS0NYaFyV07vpo3xiOxTxK0H99nvE=)
2: 26D3EB963B1211EE8ED76E25C4F9AE02.roa (hash: qv3tAt9BON7buTRTVhuMsm15F4b64BUNH1NHpvJGTQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CBB2
Validity
Not Before: Mar 29 03:56:44 2025 GMT
Not After : Apr 5 03:56:44 2025 GMT
Subject: CN=67e76f7c-fddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:be:cd:23:3e:46:1d:ab:45:03:70:42:89:
6d:12:35:9e:c5:15:c3:1b:ec:e1:bf:d2:e6:52:42:
b1:c7:7d:bf:1a:df:8a:8f:41:67:c7:d2:bc:45:e2:
23:05:c8:fb:96:3f:d7:2c:e9:88:dc:6a:3c:5c:49:
24:23:dd:9d:fb:75:8d:ad:36:0d:0e:07:ff:d2:4a:
5c:cb:a8:f3:30:a8:4a:8c:89:43:8b:a4:40:2f:f4:
92:59:c3:db:82:f5:4a:82:49:8b:af:94:75:5c:df:
8f:a3:ff:23:e4:c8:61:b8:12:ea:95:36:bd:3f:68:
4f:50:09:1c:21:db:ed:62:fa:d3:9e:93:6f:f0:57:
17:81:87:f0:05:3b:06:50:2f:3a:c5:72:a1:a4:d0:
b7:1b:60:24:f6:f4:ed:e9:54:e1:48:f8:9a:65:43:
b2:39:96:02:37:91:78:96:8c:d7:0d:61:e9:df:0e:
5b:67:63:80:ea:82:77:15:ba:75:63:2e:e2:dd:39:
b2:b9:24:cb:6c:9d:7f:6a:7e:92:08:ee:7c:54:8e:
f0:c3:3f:9a:85:67:e4:15:b2:f4:a6:fb:02:a0:f7:
9c:65:fc:4c:bd:5f:4a:64:38:85:9b:76:21:4b:d7:
ff:f5:cc:6a:c8:ae:f1:a8:55:48:3c:10:38:16:63:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:DD:4C:02:FC:F4:AC:F0:BB:4F:53:C0:BA:5F:D1:B3:86:93:60
X509v3 Authority Key Identifier:
keyid:6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:9e:7a:7b:7e:6d:a8:04:3f:67:3d:0e:b4:0a:88:d7:3f:4b:
25:b1:f3:8a:2c:bf:93:5d:43:ed:0b:bf:02:c2:11:46:36:11:
29:d4:b1:00:5b:a1:61:24:29:b7:df:37:da:24:48:cd:05:19:
f1:b4:2a:65:09:72:b4:23:e2:e1:c6:d3:36:f6:00:5e:0b:ab:
b8:f8:93:8d:1e:8e:77:6d:97:21:51:cb:c1:49:10:09:fb:5a:
72:3f:a0:5b:fb:ef:2d:14:28:2f:8b:83:95:75:d6:57:67:43:
70:b8:53:a5:da:74:5f:00:84:7b:5e:c4:03:1d:ec:99:ab:2b:
07:4d:ba:e1:2a:66:a8:d5:2b:9e:e4:91:8f:f4:1d:aa:48:e3:
54:4d:90:b0:66:85:a3:d3:ab:72:6a:17:67:10:9f:2d:0d:29:
1c:c6:96:92:52:09:ee:7d:de:98:b9:f0:20:f7:40:b6:dd:87:
e9:be:be:41:fb:5d:00:f2:32:33:50:81:e4:1d:d7:34:d8:47:
a2:c0:96:3c:60:da:75:73:e6:af:1b:1d:65:bd:8f:bc:9d:9e:
4e:34:5f:01:a9:87:e8:8d:c5:02:10:0c:ae:2b:5b:50:89:59:
66:67:1a:55:5d:67:79:e4:9f:05:04:85:96:06:11:bd:ca:8d:
e0:17:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:59:42 2025 by rpki-client